CVE-2025-8545: Portabilis i-Educar educar_motivo_afastamento_cad.php cross site scripting

Published Aug 5, 2025

Updated

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /intranet/educarmotivoafastamentocad.php. The manipulation of the argument nmmotivo leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Portabilis i-Educar

Portabilis i-Educar=2.10.0

Event History

Aug 5, 2025

CVE Published

via MITRE·04:32 AM

Data Sourced

via MITRE·04:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 20, 58473

Event

via NVD·11:03 AM

Frequently Asked Questions

What is the severity of CVE-2025-8545?

CVE-2025-8545 is classified as a problematic vulnerability that poses a risk of cross site scripting.

How do I fix CVE-2025-8545?

To fix CVE-2025-8545, ensure proper input validation and sanitization for the nm_motivo argument in the affected file.

What software is affected by CVE-2025-8545?

CVE-2025-8545 affects the Portabilis i-Educar version 2.10.

What type of vulnerability is CVE-2025-8545?

CVE-2025-8545 is a cross site scripting (XSS) vulnerability.

Where can I find more information about CVE-2025-8545?

Details about CVE-2025-8545 can be obtained from authoritative sources and vulnerability databases.